Response 282674627

Back to Response listing

Personal information, de-identification and sensitive information

Should there be a criminal offence for re-identifying de-identified information? What exceptions should apply?

Enter your response here
Yes, no exceptions should apply.

Should consent be required for the collection, use, disclosure and storage of other tracking data, such as health data, heart rate and sleeping schedule, in addition to precise geolocation tracking data?

Enter your response here
Yes.

Small business exemption

If you are a small business operator, what support from government would be helpful for you to understand and comply with new privacy obligations?

Please select all that apply
Checkbox: Unticked Information sessions
Checkbox: Unticked Written guidance
Checkbox: Unticked Digital modules
Checkbox: Unticked Self-assessment tools
Checkbox: Unticked Financial rebates or tax concessions for obtaining independent privacy advice
Checkbox: Ticked Other
Please expand on your response
It is vital that small businesses are legislated to comply with privacy obligations irrespective of cost/time involved to do so.

Employee records exemption

How should employers provide enhanced transparency to employees about the purposes for which their personal and sensitive information is collected, used and disclosed?

Response
Employees should be provided with direct access to this information.

Individual rights

Are further exceptions required for any of the proposed individual rights?

Enter your response here
Re: Proposal 18.6b - Suggest that regulatory requirements are referenced here i.e.: "...the request would be inconsistent with another law, regulatory requirement or a contract with the individual."

Controllers and processors

If small business non-APP entities that process information on behalf of APP entities are brought into the scope of the Act for their handling of personal information on behalf of the APP entity controller, what support should be provided to small businesses to assist them to comply with the obligations on processors?

Enter your response here
Unsure, but Small Businesses absolutely must be brought in under the Act. It's absolutely vital and would pose a huge gap and risk if they aren't.